CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-106237 — Information leak in Permissions in Google Chrome prior to 155.0.8059.39 allowed ...

·Source: NIST NVD

Updated:

Executive Summary

Information leak in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Low)

Analysis

Information leak in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Low) CVSS Score: 9.6. Published: 2026-10-06T19:17:50.577.

Indicators of Compromise (1)

CVE (1)
CVE-2026-106237
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Oct 6, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerability

Ledger confirms spy chip implant behind wallet crypto thefts

Ledger has confirmed that some of its devices distributed through Southeast Asian reseller CryptoBilis were compromised with a hardware implant that drained users' cryptocurrency wallets. [...]

BleepingComputer
MEDIUMVulnerability

Cyberattack shuts down refrigerators at French supermarkets

Attackers remotely defrosted refrigerators at multiple French supermarket chains overnight in a cyberattack that reportedly targeted Danfoss refrigeration controllers. [...]

BleepingComputer
CRITICALVulnerability

NVD CRITICAL: CVE-2026-108896 — A vulnerability was found in Linksys E1700 1.0.0.4.003. This affects the functio...

A vulnerability was found in Linksys E1700 1.0.0.4.003. This affects the function setLinksysIpv6 of the file /goform/setLinksysIpv6. The manipulation of the argument _6rd_prefix/_6rd_prefix_len results in os command injection. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2026-108896
NIST NVD